cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
530
Views
0
Helpful
2
Replies

Cannot Connect to VPN via Cisco VPN Client

Rick Morris
Level 6
Level 6

Here is my config.

aaa authentication login default local group tacacs+

aaa authorization console

aaa authorization config-commands

aaa authorization exec default local group tacacs+

aaa authorization network MONROE-IT local

!

crypto isakmp policy 10

encr 3des

authentication pre-share

group 2

crypto isakmp client configuration address-pool local MONROEIT

crypto isakmp xauth timeout 60

!

crypto isakmp client configuration group MONROE-IT

key <pre-share key>

dns 10.1.0.121

domain lzb.hq

pool MONROEIT

acl 101

!

!

crypto ipsec transform-set transform-1 esp-3des esp-sha-hmac

!

crypto dynamic-map MONROE-IT 1

set transform-set transform-1

reverse-route

!

crypto map MONROE-IT client authentication list default

crypto map MONROE-IT isakmp authorization list MONROE-IT

crypto map MONROE-IT client configuration address respond

crypto map MONROE-IT 1 ipsec-isakmp dynamic MONROE-IT

!

interface FastEthernet0/0

ip address 12.XX.XX.3 255.255.255.128

duplex auto

speed auto

!

interface FastEthernet0/1

no ip address

ip flow ingress

duplex auto

speed auto

!

interface FastEthernet0/1.100

encapsulation dot1Q 100

ip address 10.1.0.10 255.255.240.0

no ip redirects

ip virtual-reassembly

!

router eigrp 555

network 10.1.0.0 0.0.15.255

network 10.251.1.10 0.0.0.0

no auto-summary

!

ip local pool MONROEIT 10.1.10.1 10.1.10.6

ip forward-protocol nd

ip route 0.0.0.0 0.0.0.0 FastEthernet 0/0

ip http server

ip http authentication local

ip http secure-server

ip http timeout-policy idle 600 life 86400 requests 10000

!

access-list 101 permit ip 10.1.10.0 0.0.0.255 any

I try to connect and the client says the remote end did not respond.

1 Accepted Solution

Accepted Solutions

celiocarreto
Level 1
Level 1

Try this:

interface FastEthernet0/0

ip address 12.XX.XX.3 255.255.255.128

crypto map MONROE-IT

Regards, Celio

View solution in original post

2 Replies 2

celiocarreto
Level 1
Level 1

Try this:

interface FastEthernet0/0

ip address 12.XX.XX.3 255.255.255.128

crypto map MONROE-IT

Regards, Celio

THANK YOU!!!

I spent all week last week looking at this issue and it never dawned on me to add this line.

Thanks,

Rick